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Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the application: 
Listing of claims: 

1 . (Currently Amended) A method of authenticating a pair of correspondents A,B to permit 
exchange of information therebetween, each of said correspondents having a 
respective private key a,b and a public key p Aj pB derived from a generator a and 
respective ones of said private keys aA said method including the steps of 

i) a first of said correspondents A selecting a first random integer x and 
exponentiating a function f(a) including said generator to a power [[g (x) ]] g£x}to provide a 
first exponentiated function f(a) g{x) ; 

ii) said first correspondent A forwarding to a second correspondent B a message 
including said first exponentiated function f(ct) s(x) ; 

iii) said correspondent B selecting a second random integer y and exponentiating a 
function f(a) including said generator to a power [[g fr) ]] g(y}to provide a second 
exponentiated function f(a) g(y) ; 

iv) said second correspondent B constructing a session key K from information 
made public by said first correspondent A and information that is private to said 

second correspondent B, said session key K also being constructive by said first 
correspondent A for from information made public by B and information that is private to 
said first correspondent A; 

v) said second correspondent B generating a value h of a function F[5,K] 
where F[S,K] denotes a cryptographic function applied conjointly to 5 and K and 
where 5 is a subset of the public information provided by B thereby to bind the values 
of 5 and K; 

vi) said second o f sa id cor resp ond e nt s correspondent B forwarding a message to said 
first correspondent A including said second exponential function f(af (y) and said value h 

of said cryptographic function F[5,K]; 

vii) said first correspondent receiving said message and computing a session key 
K' from information made public by said second correspondent B and private to said 
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first correspondent A; 

viii) said first correspondent A computing a value h 1 of a cryptographic function 
F[5,K']; and 

ix) comparing said values obtained from said cryptographic functions F to 
confirm their correspondence. 

2. (Original) A method of claim 1 wherein said message forwarded by said first 
correspondent includes an identification of the first correspondent. 

3. (Original) A method according to claim 1 wherein said message forwarded by 
said second correspondent includes an identification of said second correspondent. 

4. (Original) A method according to claim 3 wherein said message forwarded by 
said first correspondent includes an identification of the first correspondent. 

5. (Original) A method according to claim 1 wherein said first function f(a) 
including said generator is said generator itself 

6. (Original) A method according to claim 1 wherein said second function f(a) 
including said generator is said generator itself. 

7. (Original) A method according to claim 6 wherein said first function f(a) 
including said generator is said generator itself 

8. (Original) A method according to claim 1 wherein said first function including 
said generator f(a) includes said public key psof said second correspondent. 

9. (Currently Amended) A method according to claim 1 wherein said second function 
including said generator [[fa]] f£a) includes said public key p A of said first correspondent. 

10. (Original) A method according to claim 1 wherein said cryptographic functions F 
are hashes of 5 and K. 

11. (Currently Amended) A method of transporting a key between a pair of correspondents 
A,B to permit exchange of information therebetween, each of said correspondents having a 
respective private key a,b and a public pa, Pb derived from a generator a and respective ones of 
said private keys a,b, said method including the steps of 

i) a first of said correspondents A selecting a first random integer x and 
exponentiating a function f(a) including said generators a power [[g (x) ]] g(x)to provide a 
first exponentiated function f(a) sCx) . 
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ii) said first correspondent A forwarding to a second correspondent B a message 
including said first exponentiated function f(a) g(x) ; 

iii) said second correspondent B constructing a session key K from information 
made public by said first correspondent A and information that is private to said 

second correspondent B, said session key K also being constructive by said first 
correspondent A from information made public by B and information that is private to 
said first correspondent A; 

iv) both of said first correspondent A and said second eorr es pend ents correspondent 
B computing a respective value h s h ! of function F[5,K] where F[S,K] denotes a 
cryptographic function applied to 5 and K and where 5 is a subset of the public 
information provided by one of said correspondents; 

v) at least one of said correspondents comparing said values h,h' obtained from 
said cryptographic function F to confirm their correspondence^;]] 4 

12. (Original) A method of claim 1 1 wherein said message forwarded by said first 
correspondent includes an identification of the first correspondent. 

13. (Original) A method according to claim 1 1 wherein said message forwarded by 
said first correspondent includes said value obtained from said cryptographic function 
by said first correspondent. 

14. (Original) A method according to claim 1 1 wherein said values obtained from 
said cryptographic functions are obtained from a hash of said public information and 
said session key BL 

15. (Original) A method according to claim 1 1 wherein said first correspondent 
selects a pair of random integers x and t and generates a session key K as f(a) s(t) ? and 
generates a value r from said first exponentiated function f(a) g(x) which includes a 
factor exponentiating said public key pb of said second correspondent B with said 
random integer t to be of the form pB E(t) a g<x) - 

16. (Original) A method according to claim 15 wherein said first correspondent A 
generates a value s from a combination of said random integer x and said private key a 
and forwards said value of r and said value of s to said second correspondent B to 
permit said second correspondent B to recover said session key K using the private 
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key b of said second correspondent B. 

17. (Original) A method according to claim 16 wherein said random integer x and 
said private key a are combined to produce s such that s=x-ra mod (p-1). 

18. (Original) A method according to claim 17 wherein said cryptographic function F 
is a hash of said public information 5 and said session key K. 

19. (Original) A method according to claim IS wherein said public information 6 is 
the public key p A of said first correspondent A. 



